VULNERABILITY INTELLIGENCE
CVE-2024-44120
CVSS score4.7 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-09-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-controlled input. An unauthenticated attacker could craft a malicious URL and trick a user to click it. If the victim clicks on this crafted URL before it times out, then the attacker could read and manipulate user content in the browser.
Weakness classification
- cna@sap.com: CWE-79